remove require securerandom from user model